$ rpki-client -vvvf rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/3133382e3235352e3232382e302f32342d3234203d3e20323633393935.roa File: 3133382e3235352e3232382e302f32342d3234203d3e20323633393935.roa (raw, json) Hash identifier: w8rGfVG0W33DxtW70qXQ0ewyf6TpLWsRmy8sNTA7rmI= Subject key identifier: A7:97:82:3B:A0:60:4D:5D:60:CD:F1:C2:5F:10:2C:03:88:11:50:28 Certificate issuer: /CN=CD30FB6CA9E66CC73CD7C3ACF9F01E4055FC367E Certificate serial: 5B3BC9A81FB61E664D6C8CEEA7AD87D322B7F4B3 Authority key identifier: CD:30:FB:6C:A9:E6:6C:C7:3C:D7:C3:AC:F9:F0:1E:40:55:FC:36:7E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD30FB6CA9E66CC73CD7C3ACF9F01E4055FC367E.cer Subject info access: rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/3133382e3235352e3232382e302f32342d3234203d3e20323633393935.roa Signing time: Sat 26 Sep 2026 14:34:18 +0000 ROA not before: Sat 26 Sep 2026 14:29:18 +0000 ROA not after: Sat 25 Sep 2027 14:34:18 +0000 asID: 263995 IP address blocks: 138.255.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/CD30FB6CA9E66CC73CD7C3ACF9F01E4055FC367E.crl rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/CD30FB6CA9E66CC73CD7C3ACF9F01E4055FC367E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD30FB6CA9E66CC73CD7C3ACF9F01E4055FC367E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 20 Oct 2026 16:12:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:3b:c9:a8:1f:b6:1e:66:4d:6c:8c:ee:a7:ad:87:d3:22:b7:f4:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD30FB6CA9E66CC73CD7C3ACF9F01E4055FC367E Validity Not Before: Sep 26 14:29:18 2026 GMT Not After : Sep 25 14:34:18 2027 GMT Subject: CN=A797823BA0604D5D60CDF1C25F102C0388115028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8a:0f:0d:d1:a9:86:1a:b8:01:01:fb:d6:df: c7:3d:78:aa:aa:53:f2:54:58:b1:08:a7:15:fd:31: 6e:25:cf:98:3d:da:5f:12:78:9f:79:f8:c0:f4:00: 39:c4:95:2b:b4:03:a0:4f:44:3a:d3:6f:85:ef:53: ba:06:ff:4c:00:17:84:0f:3d:e4:0d:24:67:46:35: 07:00:53:74:a9:d5:86:21:39:6d:eb:b6:66:f2:c9: 24:71:f1:a8:00:2e:8d:57:dc:ec:92:d1:37:41:3f: c5:3a:6a:e1:90:5a:e3:a1:d8:77:ea:bb:e8:f0:37: e3:7b:d0:a0:06:c4:85:e3:aa:de:8e:ac:e9:fd:d7: 04:e3:65:2c:af:de:26:a5:32:96:3e:ac:f8:44:78: 5e:56:bc:92:cc:0e:96:e1:26:54:27:e2:1e:ae:ed: 64:4c:7f:e0:76:2a:a6:8a:24:bf:8f:ac:ad:bf:ff: a3:cb:34:2f:00:80:cb:49:dd:e9:ed:57:e0:bb:21: 37:6c:f4:43:9d:b7:76:b2:de:a9:77:6c:86:6d:39: 34:3a:60:d6:7b:e1:04:39:76:4a:44:0a:2c:51:69: 55:ab:5a:7e:5b:02:42:5e:76:af:48:a3:a6:6c:46: fc:f1:1b:4e:81:b2:a9:0a:5c:c3:ca:1e:6e:bb:6e: b9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:97:82:3B:A0:60:4D:5D:60:CD:F1:C2:5F:10:2C:03:88:11:50:28 X509v3 Authority Key Identifier: keyid:CD:30:FB:6C:A9:E6:6C:C7:3C:D7:C3:AC:F9:F0:1E:40:55:FC:36:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/CD30FB6CA9E66CC73CD7C3ACF9F01E4055FC367E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD30FB6CA9E66CC73CD7C3ACF9F01E4055FC367E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/3133382e3235352e3232382e302f32342d3234203d3e20323633393935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.255.228.0/24 Signature Algorithm: sha256WithRSAEncryption 11:66:d2:fb:a8:99:3f:65:3d:6d:9a:0a:50:55:d2:e7:fa:5c: 84:a9:92:fb:f0:3a:7f:5a:1d:ba:7b:9d:0c:c4:b3:67:31:f7: d2:1c:b4:a2:10:80:ca:d5:da:dd:56:e9:8d:45:10:cd:93:6d: b5:24:c3:31:d5:ec:56:b1:8d:5d:fc:59:04:cf:9f:3c:0c:49: 18:22:d8:8b:ca:58:15:64:98:9a:a7:86:f9:18:67:51:b8:d1: 67:36:bd:70:25:fd:2d:ed:56:90:62:7a:6c:ca:09:95:af:47: f0:02:ab:30:0b:d8:a9:e5:81:c9:79:52:67:6a:f3:83:82:a8: 34:f8:22:b6:27:e7:68:d5:76:73:ca:9d:89:d6:df:0d:ff:33: bf:dd:ed:ce:9a:44:0e:a6:51:a9:af:d8:f0:12:7a:f4:39:b0: 57:34:42:4d:49:b9:a3:de:80:28:ef:40:22:bc:cb:74:29:2b: cc:82:6d:1b:4d:1a:19:d5:53:ac:0c:7f:28:b6:ae:ac:f0:ff: 9a:71:87:bd:ac:43:61:dd:c3:e6:7e:d1:63:88:80:6e:77:68: a6:e3:22:a4:3d:06:63:94:54:f3:fa:d6:9c:7f:86:e5:4f:20: e4:20:d6:e0:f5:73:6e:5f:bc:a9:10:c9:69:30:84:db:b6:1a: 96:e7:cc:76 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUWzvJqB+2HmZNbIzup62H0yK39LMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QzMEZCNkNBOUU2NkNDNzNDRDdDM0FDRjlGMDFFNDA1 NUZDMzY3RTAeFw0yNjA5MjYxNDI5MThaFw0yNzA5MjUxNDM0MThaMDMxMTAvBgNV BAMTKEE3OTc4MjNCQTA2MDRENUQ2MENERjFDMjVGMTAyQzAzODgxMTUwMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrig8N0amGGrgBAfvW38c9eKqq U/JUWLEIpxX9MW4lz5g92l8SeJ95+MD0ADnElSu0A6BPRDrTb4XvU7oG/0wAF4QP PeQNJGdGNQcAU3Sp1YYhOW3rtmbyySRx8agALo1X3OyS0TdBP8U6auGQWuOh2Hfq u+jwN+N70KAGxIXjqt6OrOn91wTjZSyv3ialMpY+rPhEeF5WvJLMDpbhJlQn4h6u 7WRMf+B2KqaKJL+PrK2//6PLNC8AgMtJ3entV+C7ITds9EOdt3ay3ql3bIZtOTQ6 YNZ74QQ5dkpECixRaVWrWn5bAkJedq9Io6ZsRvzxG06BsqkKXMPKHm67brltAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUp5eCO6BgTV1gzfHCXxAsA4gRUCgwHwYDVR0j BBgwFoAUzTD7bKnmbMc818Os+fAeQFX8Nn4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUZoVHBHQnBvV0FMZHBGeUpWcXRTTW91a0VBOXRxOUhZaVd3SFBFakNV SFMvMC9DRDMwRkI2Q0E5RTY2Q0M3M0NEN0MzQUNGOUYwMUU0MDU1RkMzNjdFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEMzBGQjZDQTlFNjZDQzcz Q0Q3QzNBQ0Y5RjAxRTQwNTVGQzM2N0UuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FGaFRwR0Jwb1dBTGRwRnlKVnF0U01vdWtFQTl0cTlIWWlXd0hQRWpDVUhTLzAv MzEzMzM4MmUzMjM1MzUyZTMyMzIzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzYzMzM5MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIr/5DANBgkqhkiG9w0BAQsFAAOCAQEAEWbS +6iZP2U9bZoKUFXS5/pchKmS+/A6f1odunudDMSzZzH30hy0ohCAytXa3VbpjUUQ zZNttSTDMdXsVrGNXfxZBM+fPAxJGCLYi8pYFWSYmqeG+RhnUbjRZza9cCX9Le1W kGJ6bMoJla9H8AKrMAvYqeWByXlSZ2rzg4KoNPgitifnaNV2c8qdidbfDf8zv93t zppEDqZRqa/Y8BJ69DmwVzRCTUm5o96AKO9AIrzLdCkrzIJtG00aGdVTrAx/KLau rPD/mnGHvaxDYd3D5n7RY4iAbndopuMipD0GY5RU8/rWnH+G5U8g5CDW4PVzbl+8 qRDJaTCE27YalufMdg== -----END CERTIFICATE-----Generated at Tue Oct 20 05:11:12 2026 by rpki-client